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(57) Abstract 

Information is provided to a customer whose computer network is administered remotely by a provider of network administration 
services, some of which are carried out by dedicated service machines executing special-purpose programs in a computer network: maintained 
by the service provider. A graphical computer interface allows the customer to request, via computer, information about the customer's 
network from any of the dedicated service machines. The requested information then is retrieved from an appropriate one of the dedicated 
service machines and is displayed to the customer via the graphical computer interface. 
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PROVIDING NETWORK SERVICES THROUGH A COMMON INTERFACE 



Cross Reference To Related Applications 
This application is related to and incorporates by- 
reference U.S. application° 9/039/167 f filed on March 13, 1998, 
by James M. Sullivan and James A. Keddie and entitled 
"Providing Secure Access to Network Services." 



Background 

Most large business entities use some form of local 
or wide area computer network to conduct daily business. 
Many of these entities do not want to maintain large 

10 computer staffs and therefore delegate most network 
management responsibilities to an off-site network 
management provider. In general, these network management 
providers maintain full control over the customer's network. 
As a result, information about the customer's network, such 

15 as the utilization patterns and overall health of the 

network, and information about the service performance of 
the network management provider, is not readily available to 
the customer. The customer generally must request this 
information from the network management provider and await 

20 the delivery of a report. 



Summary 

In one aspect, the invention relates to the remote 
administration of a customer's computer network by a 
provider of network administration services, such as a 
25 trouble ticketing service or a network monitoring service, 
some of which may be carried out by dedicated service 
machines executing special -purpose programs in a computer 
network maintained by the service provider. A graphical 
computer interface allows the customer to request, via 
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computer, information about the customer's network: from any 
of the dedicated service machines. The requested 
information then is retrieved from an appropriate one of the 
dedicated service machines and is displayed to the customer 
via the graphical computer interface. 

In some embodiments, the graphical computer 
interface may be presented in a format that allows viewing 
through an off-the-shelf browser application. The graphical 
computer interface may be presented by executing a program 
on a network server computer, which in turn may be 
configured to deliver the customer's request to the 
appropriate service machine. One instance of the program 
may be executed for each customer accessing the service 
provider's network, and a customer-specific version of the 
graphical computer interface may be presented to each 
customer . 

In addition, the network server computer may be 
configured with a unique IP address for each customer 
capable of accessing the service provider's network, and 
each IP address may be preassigned to only one customer. 
Each IP address may represent a TCP/IP stack in the network 
server computer. 

Each embodiment of the invention may provide any one 
or more of several advantages. For example, the customers 
of a network management service provider may access a wide 
variety of information about their local networks through an 
easy-to-use, Web-based interface viewed through an off-the- 
shelf browser. The customers can access much of the 
information almost immediately via computer, without having 
to submit requests to human operators and await human action 
for responses to the requests. The customers also do not 
need to purchase or even understand the hardware and 
software components used to provide the network management 
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services. In short, the owner of a computer network can 
outsource essentially all network management 

responsibilities without forfeiting quick and easy access to 
information about the network. The network owner also can 
5 receive quick and easy-to-understand reports on the service 
provider's performance. 

Other embodiments and advantages will become 
apparent from the following description and from the claims. 

Brief Description of the Drawings 
FIG. 1 is a schematic diagram of computer network 
that provides network services to a remote client computer. 

FIG. 2 is a functional block diagram of network 
server computer through which the client computer accesses 
the network services. 

FIG. 3 is a schematic diagram of hardware and 
software components of the network server computer. 

FIG. 4 is a directory structure under which the 
network server computer may store the software components 
required to provide the network services. 

FIG. 5 is a view of a graphical user interface 
through which a user of the client computer can access the 
network services. 

Detailed Description 
Referring to FIG. 1, a network service provider 
25 maintains a computer network 10 that provides network 

services to one or more customers at remote customer sites 
12. These services together form an integrated management 
system, through which the network service provider's 
customers can receive complete network support and 
3 0 management through a single, remote point of contact, as 

discussed below. Typically, each customer site 12 houses a 

- 3 - 
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local area network (LAN) 14, connected to which is at least 
one client computer 16 capable of accessing the network 
services through the provider's computer network 10. Each 
customer site 12 also typically includes a router 18 that 
governs the flow of traffic between the customer's LAN 14 
and any network outside the customer site 12, such as the 
service provider's network 10 and the Internet 20. 

The customer can connect to the provider's network 
10 in several ways, including a direct link 26 to the 
network 10 through a frame relay (FR) , Point-to-Point 
Protocol (PPP) , or Integrated Services Digital Network 
(ISDN) connection, and an indirect link 2 8 via the Internet 
20. All traffic between the customer's site 12 and the 
provider's network services must pass through a firewall 24, 
which guarantees each customer secure access to the network 
services and which protects the service provider's network 
from unwanted intrusion by its customers and by other remote 
entities. Copending U.S. patent application Q 9 / 039 ' 16 / 7 filed 
on March 13, 1998, by James M. Sullivan and James A. Keddie 
(incorporated by reference) , describes a network 
architecture through which the network service provider' s 
customers may access the network services securely. In that 
application, the firewall 24 is implemented as a static 
routing policy distributed among four server computers, one 
of which governs all access to the network services, 
including access from within the provider's network 10, and 
the rest of which govern access to the provider's network 10 
by its customers. 

The network service provider may provide a wide 
variety of network management services, including an action 
request system, through which a customer can submit requests 
for solutions to problems related to its LAN 14 and to 
individual computers connected to the LAN 14 ; a network 
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monitoring service, which gathers and provides information 
about the performance of the customer's LAN 14; service 
utilization reports, which provide information indicating 
how the customer is using the network services; an 
electronic mail archive that preserves correspondence 
between the customer and the network service provider; a 
bulletin board on which the customer can post information to 
the users of its LAN 14 and the network service provider can 
post notices to the customer; a purchase requisition 
service, through which the customer can purchase hardware 
and software from the network service provider; and an on- 
line help service. These services are provided, at least in 
part, by a subnetwork 3 0 of computers ("service machines") 
linked to the firewall 24 through a connection such as an 
Ethernet cable 32 or a token ring. Each of the computers in 
the subnetwork 30 may be, e.g., a network server computer 
configured to implement one of the network services or a 
network component needed to provide the services. 

The subnetwork 3 0 includes an interface server 
computer, or "web server" 34, that provides the interface 
through which the service provider's customers can access 
all of the network services. The web server 34 may be 
implemented, e.g., as a Netscape Enterprise Server running 
an executable program that allows the customer to access all 
of the services through a single, hypertext transfer 
protocol (http) based interface, which the customer may view 
through an off-the-shelf web browser, such as Netscape 
Navigator or Microsoft Internet Explorer. The web server 
34, including the customer interface, is described in more 
detail below. 

The action request service is provided by a trouble 
ticketing server 36 running a trouble ticketing program, 
such as Remedy Corporation's "Action Request System" (AR 
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System) software. A program such as Remedy's "ARWeb" 
interface may be used to provide the communication interface 
between the web server 34 and the trouble ticketing server 
36. The trouble ticketing server 36 allows each of the 
network service provider's customers to submit trouble 
tickets requesting assistance from the network service 
provider and to generate inquiries into the progress of 
those trouble tickets. The action request server 36 also 
generates statistical information about each customer's 
utilization of the action request service. All of the 
information generated by the trouble ticketing server 36 is 
stored in a database engine 38, such as a Sybase engine. 
The trouble ticketing server 36 and the database engine 38 
may employ, e.g., Microsoft's "Open Database Connectivity" 
(ODBC) standard to transmit data to each other. 

An automated reporting server 40 running, e.g., 
Seagate Software's "Crystal Info" application gathers 
information from the database engine 3 8 and generates 
periodic (e.g., daily) reports for each customer. The 
automated reporting server 40 may use, e.g., the ODBC 
protocol to retrieve information from the database engine 
and the file transfer protocol (ftp) to deliver the reports 
to the web server 34. The web server 34 in turn provides 
the reports to the customer through the http interface. The 
reports generated by the automated reporting server 4 0 may 
include information such as the number of trouble tickets 
submitted by a customer on a given day, the amount of time 
taken to resolve these tickets, and the number of tickets 
submitted by a given department within the customer's 
organization . 

The network monitoring service is distributed among 
two computers, a network analyzer server 42 running, e.g., 
Concord Communications' "Network Health" software, and a 
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router management server 44 running, e.g., Cabletron 
Systems' "Spectrum Enterprise Manager" software. Via the 
Ethernet connection 32 to the firewall 24, the network 
analyzer 42 utilizes Simple Network Management Protocol 
5 (SNMP) polling of the customer's LAN 14 to gather 

information about the flow of information through certain 
devices that have been registered with the network analyzer 
42, including bridges, routers and switches in the 
customer's LAN 14. The "Network Health" application running 

10 on the server 42 uses this information to analyze usage 

trends in the LAN 14, to evaluate the overall health of the 
LAN 14, and to identify components in the LAN 14 that have 
been affected by events such as errors and high bandwidth 
utilization. The application generates reports that, among 

15 other things, indicate the weekly, daily, and hourly traffic 
volumes of registered devices in the LAN 14, identify the 
devices that have experienced the highest traffic volumes 
and those have undergone the greatest changes in traffic ■ 
volume, and indicate the bandwidth utilization for each 

20 registered device in the LAN 14. The network analyzer 42 

delivers the reports directly to the customer, bypassing the 
web server 34, as discussed below. 

The router management server 44 also conducts SNMP 
polling to gather information from the customer's LAN 14. 

25 Using Cabletron' s "Spectrum Enterprise Management" 

application, this server 44 recognizes when a problem is 
occurring in the customer's LAN 14, determines precisely 
where the problem is occurring, identifies a probable cause 
of the problem, and generates an alarm message that reports 

30 all of this information and that suggests an action to 
resolve the problem. The server 44 updates the alarm 
information periodically, e.g., every thirty seconds, to 
ensure that problems in the customer's LAN 14 are detected 
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quickly. The server 44 uses Cabletron' s "AlarmWeb" 
application to provide the alarm information to the web 
server 34 . 

A desktop management server 46 also links to the 
firewall 24 through the Ethernet connection 32. This server 
46, which runs one or more network management applications 
such as Microsoft's "System Management Server" (SMS) and 
Compaq's "Insight Manager" (CIM) , uses SNMP polling to 
gather information about the desktop configuration of each 
client computer 16 at the customer site 12. The server 46 
stores this information in the database engine 38, where the 
network service provider's personnel can access the 
information for use in solving the customer's problems. 

A protocol analyzer server 48 polls each customer's 
LAN 14 for information about traffic in the LAN 14. For 
example, the protocol analyzer server 48 may use NetScout's 
protocol analyzer application to retrieve protocol 
distribution information from NetScout probes embedded in 
the customer's LAN 14. The protocol analyzer 48 stores this 
information in the database engine 38 for access by the 
customer and the network service provider. 

Referring to FIG. 2, the web server 34 may be a 
standard programmable computer, such as a Sun UltraSparc 
workstation, having a central processing unit (CPU) 50 and 
system memory coupled to a system bus 56. The system memory 
may include both random access memory (RAM) 52 and non- 
volatile memory, e.g., read-only memory (ROM) 54. An 
input/output (I/O) interface 58 coupled to the system bus 56 
and to an I/O bus 60 facilitates the flow of data between 
the CPU/system memory and various input and output devices, 
including a fixed storage device such as a hard disk 62. 
The hard disk 62 typically includes several executable 
programs, each of which may be loaded into RAM 54 to program 
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the computer 34 to perform certain predefined functions. 
One of these programs is a network server application, such 
as Netscape's "Enterprise Server 11 program 64, which enables 
the computer to function as a Web server. The hard disk 62 
also contains a "web interface" program 66, which provides 
the interface through which the service provider's customers 
access the network services. The communication programs 
"ARWeb" 68 and "AlarmWeb" 70 also are stored on the hard 
disk 62. As discussed above, these programs, when loaded 
into system memory, allow the web server 34 to communicate 
with the trouble ticketing server 3 6 and the router 
management server 44, respectively. The hard disk 62 also 
stores one or more script files 74 that allow the web server 
34, while executing the web interface program 66, to create 
and maintain a unique "web site" for each of the service 
provider's customers. As discussed below, the web site 
associated with a customer allows that customer, and only 
that customer, to access the network services. 

Referring also to FIG. 3, the web server 34 
maintains a unique TCP/IP stack (SI . . . Sn) for 
communication with each customer and another TCP/IP stack 
(Sx) for communication with all of the service machines in 
the subnetwork 30 (FIG. 1) . The firewall 24 maintains 
information linking each of the customer-specific TCP/IP 
stacks (SI . . . Sn) with the IP address of the router 18 at a 
corresponding customer site 12. Upon receiving a query from 
a customer site 12, the firewall 24 determines the IP 
address of the customer site 12 and then forwards the 
request directly to the corresponding TCP/IP stack in the 
web server 34. The firewall 24 also ensures that all 
traffic flowing from a customer-specific TCP/IP stack in the 
web server 24 is routed only to the corresponding customer 
site 12. 
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The web server 34 creates a unique web site, or web 
server process (WS1 . . . WSn) , for each customer by running 
one copy of a network server application, such as Netscape's 
"Enterprise Server" application 64, for each customer. Each 
web server process is given unique user, process and group 
identifiers (UID, PID and GID) to ensure that only files 
associated with that web process and the corresponding 
customer can be accessed in processing a query from the 
customer site. The UID and GID are determined by a unique 
customer account, e.g., a Unix account (Ul ... Un) , that is 
established when the customer's web site is added to the web 
server. Each Unix account includes a unique web name and 
password identifying the customer associated with the 
account. The customer accounts are used only by the 
processes running on the web server 34 and are not visible 
to the customers. 

The web server 34 runs one instance of an alarm 
application, such as Cabletron' s "AlarmWeb" application, for 
each customer having access to the router management 
service. If "AlarmWeb" is used, each instance of the 
application is launched as an AlarmWeb process (AW1 . . . AWn) 
when the web server 34 is first booted up. Once running, 
each AlarmWeb process periodically (e.g., once per minute) 
retrieves, from the router management server via the network 
services TCP/IP stack (Sx) , two files containing alarm 
information for the corresponding customer site. The 
AlarmWeb process then stores the files in the web server, 
e.g., on the hard disk or in memory. One of the files, an 
"alarms.HTML" file, provides a description of each alarm 
that has occurred in the customer's LAN; the other file, a 
" totals . HTML" file, indicates the total number of alarms 
that have occurred in the customer's LAN. The AlarmWeb 
process uses the identifiers defined in the corresponding 
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customer account to retrieve the "alarms .HTML" and 
"totals . HTML" files from the router management server, which 
itself periodically updates the information in the files by 
SNMP polling the customer site, as discussed above. Upon 
receiving a customer query from a TCP/IP stack, the 
corresponding web process delivers the query to the 
associated AlarmWeb process, which in turn retrieves the 
stored files and delivers the information contained in them 
to the corresponding customer. 

The web server 34 runs only one instance of Remedy's 
"ARWeb" program, i.e., one ARWeb process, to access 
information in the trouble ticketing server, regardless of 
how many customers subscribe to the trouble ticketing 
service. The web server ensures security by maintaining for 
each customer a unique ARWeb account (Al . . . An) , which the 
web server must reference to access information in the 
trouble ticketing server. As with the Unix accounts 
described above, each ARWeb account includes a unique user 
name and password identifying the associated customer. The 
ARWeb accounts are not visible to the customers. 

Upon receiving a trouble ticket from a customer- 
specific TCP/IP stack (SI . . . Sn) , the corresponding web 
server process (WS1 . . . WSn) accesses the ARWeb (Al . . . An) 
account for the customer and then forwards the trouble 
ticket to the ARWeb process (AR) . The ARWeb process then 
delivers, via the network services TCP/IP stack (Sx) , the 
trouble ticket to the trouble ticketing server, which in 
turn logs the ticket in the database engine. The 
information in the database engine is updated periodically 
to reflect progress made by the network service provider in 
processing the problem identified in the trouble ticket. 

Upon receiving an inquiry about the status of 
trouble tickets from a customer through the corresponding 
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TCP/IP stack, the web server process associated with the 
customer accesses the customer' s ARWeb account and forwards 
the inquiry to the ARWeb process. The ARWeb process in turn 
forwards the inquiry to the trouble ticketing server, which 
retrieves from the database engine all information needed to 
respond to the inquiry. The trouble ticketing server then 
delivers the requested information, via the network services 
TCP/IP stack (Sx) , to the ARWeb process and eventually to 
the appropriate web server process, which in turn provides 
the information to the customer through the web interface. 

When the customer wants to access network health 
information in the network analyzer server, the customer is 
allowed to access the network analyzer directly, bypassing 
the web server altogether. The network analyzer, which is 
configured with Concord Communications' "Network Health" 
application, maintains a unique customer account for each 
customer subscribing to the network management service. 
When a customer submits an inquiry to the network analyzer, 
the customer must enter a user name and password identifying 
the appropriate customer account in the network analyzer. 
The server receives the inquiry, along with the user name 
and password, and gathers the information needed to respond 
to the inquiry. The network analyzer server then delivers 
the requested information directly to the customer, through 
the firewall, bypassing the web server. Alternatively, the 
web server 34 may run a "Network Health" process for each 
customer, and all network health inquiries may be handled by 
the web server through the customer-specific TCP/IP stacks 
(SI . . . Sn) and the network services TCP/IP stack (Sx) . 

The web server also stores a " cron. script " file for 
each customer. This file contains scripts that are used to 
instruct the automated report server to generate trouble 
ticketing reports for the customer. The web server 
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periodically (e.g., once per day) launches the "cron. script n 
file to run the scripts, which in turn invoke file transfer 
protocol (ftp) processes that transfer information from the 
database engine to the automated reporting server. The 
automated reporting server then organizes the information 
into customer reports. Using ftp, the automated reporting 
server delivers the reports to the appropriate web server 
process, which in turn stores the reports in the web server, 
e.g., on the web server's hard disk. Upon receiving a 
request for the reports from the customer, the web server 
process retrieves the stored reports and delivers them to 
the user through the web interface . 

Referring now to FIG. 4, the web server maintains a 
n web_servers u directory 100 on its hard disk to manage the 
files and processes needed to provide the network services 
to customers. Within this directory, the web server 
maintains a "customer" directory 102 for each customer with 
access to the network services; an "arweb" 104 directory, 
which stores the- "ARWeb" application and all related files, 
including HTML forms, images, and an ARWeb configuration 
file; an "admin" directory 106, which is used to administer 
the Netscape "Enterprise Server" program; and an 
"SDMS_admin" directory 108, which is used to administer the 
customer-specific "web sites" discussed above. The 
"SDMS_admin" directory 108 itself includes three key 
directories, including a "bin" directory 110, which stores 
the scripts that are used, e.g., in administering the 
customer specific web sites, adding a web site for a new 
customer, and adding a new action request; a "cgi-bin" 
directory 112, which stores scripts that are used to 
construct hypertext markup language (HTML) pages displayed 
via the web interface; and a "docs" directory 114, which 
stores certain HTML pages and images displayed in the 
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customer- specif ic web sites via the web interface, including 
a main menu page, discussed below. 

Each "customer" directory 102 also includes several 
directories, including a "cgi-bin" directory 116, which 
5 maintains the "ARWeb" components associated with the 

corresponding customer; and a "docs" directory 118, which 
maintains several directories that store information related 
to network service menus presented to the customer through 
the web interface. The directories within the "docs" 

10 directory include an "AlarmWeb" directory 12 0, which stores 
the "AlarmWeb" software and related files, including HTML 
pages, images and a help file; a "network" directory 122, 
which stores an HTML page that provides, via the web 
interface, a menu associated with the network monitoring 

15 service; an "images" directory 124, which stores items such 
as logos, button images, and figures displayed in the 
customer-specific web site; a "reports" directory 126, which 
stores HTML pages associated with the automatic reporting 
service, report templates used by the service, and ftp 

20 commands invoked by the corresponding " cron. script " file to 
transfer reports from the automated report server to the web 
server; and an "action_request" directory 128, which stores 
HTML pages that are displayed through the web interface in 
connection with the trouble ticketing service. 

25 Referring now to FIG. 5, the web server provides a 

graphical interface, or web interface, that allows each 
customer to access the network services with an off-the- 
shelf web browser. Each customer receives a customized 
version of the web interface via http transfers of files 

30 such as HTML pages and images from the web server. When a 
customer first gains access to the service provider's 
network, either through direct connection or through the 
Internet, as discussed above, the web server delivers an 
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HTML home page 130 to the customer's web browser. The home 
page 130 may include elements such as a logo 132 identifying 
the network service provider and a title bar 134 indicating 
the name under which the network services are provided. The 
home page 13 0 also includes several buttons 13 6, each of 
which allows the customer to access additional HTML pages 
related to one of the network services. For example, an 
"action request" button 136a invokes an HTML page that 
allows the customer to submit trouble tickets to the web 
server and to submit inquiries into the status of 
previously- submitted trouble tickets. A "network" button 
136b invokes an HTML page that allows the customer to submit 
queries to the network monitoring service, including both 
the network analyzer server (Network Health) and the router 
management server (Spectrum) . A "reports" button 136c 
invokes an HTML page that allows the customer to receive 
reports generated by the automated reporting server. Many 
of these web pages themselves include elements, such as 
buttons and selection boxes, that allow the user to access 
various features the network services . 

Other embodiments are within the scope of the following 
claims. For example, other services, including human- 
oriented services such as telephone support and on-site 
support, may be provided in additional the computer-oriented 
services described above. Furthermore, while the invention 
has been described in terms of well-known hardware and 
software products, such as Remedy's "ARSystem, " Seagate's 
"Crystal Info," and Concord's "Network Health" applications, 
other products that operate similarly may be used. 
Moreover, the software applications described above and/or 
other unmentioned applications may be used to provide 
network services other than those described. 
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What is claimed is: 

1 1. A method for use in providing information to a 

2 customer whose computer network is administered remotely by a 

3 provider of network administration services/ some of which are 

4 carried out by dedicated service machines executing special - 

5 purpose programs in a computer network maintained by the 

6 service provider, the method comprising: 

7 presenting a graphical computer interface that allows the 

8 customer to request, via computer, information about the 

9 customer's network from any of the dedicated service machines, 

10 retrieving the requested information from an appropriate 

11 one of the dedicated service machines, and 

12 displaying the requested information to the customer via 

13 the graphical computer interface. 

1 2. The method of claim 1, further comprising presenting 

2 the graphical computer interface in a format that allows 

3 viewing through an off-the-shelf browser application. 

1 3. The method of claim 1, wherein presenting the 

2 graphical computer interface comprises executing a program on 

3 a network server computer. 

1 4. The method of claim 3, further comprising 

2 configuring the network server computer to deliver the 

3 customer's request to the appropriate one of the dedicated 

4 service machines. 

1 5. The method of claim 3, further comprising executing 

2 one instance of the program for each customer accessing the 

3 service provider's network. 
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1 6. The method of claim 3, further comprising 

2 configuring the network server computer with a unique IP 

3 address for each customer capable of accessing the service 

4 provider's network. 

1 7. The method of claim 6, further comprising 

2 preassigning each IP address to only one customer. 

1 8. The method of claim 6, wherein each IP address 

2 represents a TCP/IP stack in the network server computer. 

1 9. The method of claim 1, further comprising 

2 presenting a customer-specific version of the graphical 

3 computer interface to each customer accessing the service 

4 provider's network. 

1 10. The method of claim 1, wherein the network 

2 -administration services include a trouble ticketing service.- 

1 11, The method of claim 1, wherein the network 

2 administration services include a network monitoring 

3 service. 
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1 12. An executable program, tangibly fixed in a storage 

2 medium, for use in providing information to a customer whose 

3 computer network is administered remotely by a provider of 

4 network administration services, some of which are carried 

5 out by dedicated, service machines executing special -purpose 

6 programs in a computer network maintained by the service 

7 provider, the executable program comprising instructions 

8 that, when executed by a computer in the service provider's 

9 network, enable the computer to: 

10 present a graphical computer interface that allows the 

11 customer to request, via computer, information about the 

12 customer's network from any of the dedicated service 

13 machines, 

14 retrieve the requested information from an appropriate 

15 one of the dedicated service machines, and 

16 display the requested information to the customer via 

17 the graphical computer interface. 

1 13. The program of claim 12, wherein the graphical 

2 computer interface is presented in a format that allows 

3 viewing through an off-the-shelf browser application. 

1 14. The program of claim 12, wherein the computer 

2 comprises a network server computer. 

1 15. The program of claim 12, wherein the computer is 

2 configured to deliver the customer's request to the 

3 appropriate one of the dedicated service machines. 

1 16. The program of claim 12, wherein the computer 

2 executes one instance of the executable program for each 

3 customer accessing the service provider's network. 
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1 17. The program of claim 12, wherein the computer is 

2 configured with a unique IP address for each customer 

3 capable of accessing the service provider's network. 

1 18. The program of claim 17, wherein each IP address 

2 is preassigned to only one customer. 

1 19. The program of claim 17, wherein each IP address 

2 represents a TCP/IP stack in the computer. 



1 20. The program of claim 12, wherein a customer- 

2 specific version of the graphical computer interface is 

3 presented to each customer accessing the service provider's 

4 network. 

1 21. The program of claim 12, wherein the network 

2 administration services include a trouble ticketing service. 

1 22. The program of claim 12, wherein the network 

2 administration services include a network monitoring 

3 service. 
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